upgrade. - for 'internal load balancer' you should deploy a separate gateway, in a different namespace. All ingress gateway have a "app:ingressgateway" label, used to identify it as an ingress, and an "istio: ingressgateway$SUFFIX" label of Gateway selection. The Gateways use "istio: ingressgateway$SUFFIX" selectors. # Multiple gateway versions # Using different pilot versions # Migration from istio-system Istio 1.0 includes the gateways in istio-system. Since the external IP is associated with the Service...